From 5ed7d5109e35638c35cdcea3d3d2e49c0aad5f57 Mon Sep 17 00:00:00 2001
From: zkldi <20380519+zkldi@users.noreply.github.com>
Date: Sun, 17 Sep 2023 22:57:13 +0100
Subject: [PATCH] fix: clear out previous email code on email change

---
 server/src/server/router/api/v1/users/_userID/router.ts | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/server/src/server/router/api/v1/users/_userID/router.ts b/server/src/server/router/api/v1/users/_userID/router.ts
index 5a2858489..97497a0bb 100644
--- a/server/src/server/router/api/v1/users/_userID/router.ts
+++ b/server/src/server/router/api/v1/users/_userID/router.ts
@@ -407,6 +407,11 @@ router.post(
 		if (ServerConfig.EMAIL_CONFIG) {
 			const resetEmailCode = Random20Hex();
 
+			// clear out the previous email code!
+			await db["verify-email-codes"].remove({
+				userID: user.id,
+			});
+
 			await db["verify-email-codes"].insert({
 				code: resetEmailCode,
 				userID: user.id,